$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa File: 40e3f322-a216-3c3f-b94f-271c6ddb1492.roa (raw, json) Hash identifier: PldJe2+tHsHShBVS5+WvUce65yEQiBOWbcZPY/N/2PA= Subject key identifier: C9:71:E2:CF:20:17:6B:F4:77:B9:C7:A1:47:A6:C2:89:2F:10:4F:08 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584DCAFB0B8C34C3FE9BA9486C80 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 30103 IP address blocks: 161.199.138.0/23 maxlen: 24 198.251.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:0b:8c:34:c3:fe:9b:a9:48:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=9ab73696-7f51-4ee2-aac7-9515201e180b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:95:0e:7d:83:5f:c9:39:41:22:2f:e4:1e:b0: eb:f4:63:42:ae:7d:b9:79:32:8e:7a:2f:26:29:2f: 23:16:c4:1f:39:5b:c2:2c:23:1a:4a:a2:8f:af:91: b5:d9:6f:0c:73:a0:ed:5d:73:e1:2f:69:e3:3b:e5: 4c:33:2e:e2:3a:98:81:9f:68:b6:28:7d:b7:61:a7: 18:2c:eb:2b:51:5a:d9:e7:9b:57:11:d4:63:01:d1: 6a:89:37:0e:cd:9c:ff:25:49:8a:33:cf:5b:4f:96: f8:1b:61:51:c3:c4:04:78:a2:0b:4a:e3:9e:fc:fa: 68:3f:cd:f5:b2:da:ae:c5:56:2a:d2:f7:aa:f2:73: 87:65:9c:ed:5b:83:92:a6:d1:a9:27:12:57:10:94: 1a:f5:59:fb:e8:45:94:dc:77:f8:b1:be:1d:19:9e: 7f:6b:fd:b3:84:82:be:d7:58:28:cb:98:26:d7:a1: 63:f8:ae:e6:96:c4:8a:6d:ba:4b:f6:07:1a:4d:9b: c4:a8:ed:0c:0c:b3:7d:8e:f2:bd:e5:03:09:e7:7a: 70:1a:26:a4:c1:43:7f:4b:3b:8d:04:46:05:bc:a3: 52:4c:b4:4c:0c:40:f3:f3:0b:e7:86:53:07:87:a2: dd:2a:c2:89:42:b1:94:2c:9b:a5:3f:89:72:be:df: ce:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:71:E2:CF:20:17:6B:F4:77:B9:C7:A1:47:A6:C2:89:2F:10:4F:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 161.199.138.0/23 198.251.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:09:28:75:74:1f:ea:40:f6:a3:88:bf:07:e2:1f:82:45:fe: 0f:7d:61:85:a5:63:96:64:5a:76:8c:4e:d9:4f:a4:01:be:e8: 41:cc:d4:55:64:82:af:3c:5a:6f:9b:3e:fd:94:aa:51:9f:30: 6c:82:93:5b:a8:21:cd:b2:93:e4:ec:4e:cc:6e:ae:ed:be:a0: 1e:ae:47:6e:50:ce:17:bc:07:61:68:cf:64:6b:13:7b:69:cf: af:aa:91:75:96:2d:e6:c7:06:58:7e:4c:84:f4:ad:86:47:a0: 9e:35:85:6a:6c:a5:4b:20:8e:4f:7d:5d:06:c3:60:07:cd:53: 6e:ed:d0:0d:b6:9d:64:6a:b7:ec:a2:92:b9:1d:f0:29:ca:c2: e2:46:28:a6:a1:69:87:3b:69:e1:38:20:40:97:00:a9:1a:6d: fa:88:0b:49:7c:53:e4:6c:70:db:f5:c9:70:14:60:af:6e:64: 18:21:e9:a1:65:18:6b:dd:5b:27:60:92:b4:87:38:17:1d:2e: cb:28:7f:21:c5:2d:89:59:46:d3:da:a1:73:36:3b:c2:19:6d: 07:73:f8:2c:db:0e:1b:4e:17:dd:10:b3:37:74:f3:d3:42:ce: 27:f1:4e:ff:0a:13:ad:87:21:a0:cf:2d:d2:54:cb:3f:62:c4: 86:cb:f6:3b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE3K+wuMNMP+m6lIbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk OWFiNzM2OTYtN2Y1MS00ZWUyLWFhYzctOTUxNTIwMWUxODBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZUOfYNfyTlBIi/kHrDr9GNCrn25eTKOei8m KS8jFsQfOVvCLCMaSqKPr5G12W8Mc6DtXXPhL2njO+VMMy7iOpiBn2i2KH23YacY LOsrUVrZ55tXEdRjAdFqiTcOzZz/JUmKM89bT5b4G2FRw8QEeKILSuOe/PpoP831 stquxVYq0veq8nOHZZztW4OSptGpJxJXEJQa9Vn76EWU3Hf4sb4dGZ5/a/2zhIK+ 11goy5gm16Fj+K7mlsSKbbpL9gcaTZvEqO0MDLN9jvK95QMJ53pwGiakwUN/SzuN BEYFvKNSTLRMDEDz8wvnhlMHh6LdKsKJQrGULJulP4lyvt/OswIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMlx4s8gF2v0d7nHoUemwokvEE8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNDBlM2YzMjItYTIxNi0z YzNmLWI5NGYtMjcxYzZkZGIxNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoceKAwQD xvv4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJcJKHV0H+pA9qOIvwfiH4JF/g99YYWlY5ZkWnaMTtlPpAG+ 6EHM1FVkgq88Wm+bPv2UqlGfMGyCk1uoIc2yk+TsTsxuru2+oB6uR25Qzhe8B2Fo z2RrE3tpz6+qkXWWLebHBlh+TIT0rYZHoJ41hWpspUsgjk99XQbDYAfNU27t0A22 nWRqt+yikrkd8CnKwuJGKKahaYc7aeE4IECXAKkabfqIC0l8U+RscNv1yXAUYK9u ZBgh6aFlGGvdWydgkrSHOBcdLssofyHFLYlZRtPaoXM2O8IZbQdz+CzbDhtOF90Q szd089NCzifxTv8KE62HIaDPLdJUyz9ixIbL9js= -----END CERTIFICATE-----Generated at Wed May 13 14:04:53 2026 by rpki-client